RE: https://cyberplace.social/@tangallio/117486288094240832
There are some clues into Fortinet’s thinking about not issuing CVEs until much later in this, a long running issue.
Fellow customers - is this how you want your vendors to function?
There’s a long history of this - example. https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
When Claude becomes your vulnerability info tool. https://www.reddit.com/r/fortinet/s/GT78N9O6m3
@GossiTheDog 🍿 🤣
@GossiTheDog
This looks like it should be put on a big motivational poster that says at the bottom
Transparency
Practice it you spunk trumpets
@GossiTheDog Now I'm curious where exactly Fortinet uses node.js... hmm.
Oct 22, 2026, 9:02 PM@GossiTheDog it's part of the long standing Fortinet security Russian roulette, which made me discourage their use at various corporate relations.
@GossiTheDog @tangallio back in the olden days, Firewall people were security people. Now, they are often just people who manage traffic with boxes and need to be convinced to install updates. A high CVE can be convincing.
Not providing one slows down patching.
Also, you loose the communication initiative, it will go to the people doing the AI supported diff’ing of images.